Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: QQEhM7E4ctGVDh7wMiQvBDAaTaxPHQW3l7o3iBW3d/I=
Subject key identifier: 73:E5:2A:97:52:E7:14:F7:B2:2E:76:DF:31:BE:A1:07:BA:31:CB:16
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019D292964C10878BFD6C88317842DA5E633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 133E
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: ZFhSq6F4un4OFF5dY4MGYNandpE9lu4hhBkZ+kkcT84=)
2: hRHKFg_8XNSpz14bqguIKVw9u_g.roa (hash: IvcC+EHpFNhaRen15J+kANi4Vrf+W52puDOFvkl+2OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:64:c1:08:78:bf:d6:c8:83:17:84:2d:a5:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=73e52a9752e714f7b22e76df31bea107ba31cb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:12:f6:dd:df:94:db:d8:40:92:e7:e5:d1:
c1:a0:ab:7b:5a:9c:cf:61:c8:bd:54:16:c5:8d:54:
ae:79:37:f7:04:74:72:49:05:d0:8a:29:08:64:34:
3f:96:14:7d:62:ee:6a:0f:f2:f1:e4:3d:f8:eb:05:
bf:c8:7f:ce:bb:70:e4:c0:18:13:5a:7d:55:d8:99:
1d:14:e4:71:de:a2:75:13:e5:ca:98:cc:66:b9:d8:
32:c6:5d:f7:cb:61:ef:30:64:83:83:7f:42:0b:74:
ac:97:85:bb:2f:fd:a2:45:10:eb:03:84:cd:29:0d:
17:b3:93:21:f8:53:f8:f3:f2:03:32:81:fd:dd:96:
20:8d:f1:dd:17:22:21:8d:96:c8:53:5d:36:83:67:
07:c0:1f:2c:c0:98:4b:de:01:33:3c:ce:d9:f8:e2:
32:8e:70:fb:7a:2a:99:8b:1c:67:3b:ae:91:35:e9:
16:5e:58:d4:4e:6b:d6:3d:5e:e1:9f:c2:e8:2c:e7:
46:65:7b:ab:dc:14:ba:7b:ec:88:33:7e:e8:d2:53:
2d:92:d4:4f:78:d5:7d:c0:a9:e8:14:f5:92:8d:bd:
3e:6a:8c:87:c5:d5:7a:8f:e2:fc:b1:20:29:35:86:
89:42:1c:7e:09:2c:1a:12:82:e8:7a:76:81:35:49:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:2A:97:52:E7:14:F7:B2:2E:76:DF:31:BE:A1:07:BA:31:CB:16
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b1:da:1d:4f:ad:be:81:15:2f:b4:46:64:a7:27:1e:8e:66:
43:03:9f:ce:70:ba:ad:30:91:1c:68:91:4b:b3:cb:58:3c:07:
f9:f8:41:f5:89:ea:4e:24:47:6d:21:58:8e:fc:56:f7:fb:93:
26:11:73:40:10:24:05:7f:d9:04:1e:3f:c5:07:66:4b:0d:b2:
e8:82:b7:2a:f1:14:29:d0:d6:3c:6c:b2:2f:af:b6:ea:c0:e6:
b3:51:cc:1d:c6:b6:11:21:8e:bf:29:66:8c:ab:ca:13:c3:be:
db:49:b2:c2:21:ef:d6:a6:38:cb:05:5d:1f:cf:62:2e:94:2a:
16:24:2a:36:2e:f3:cc:ad:cd:82:f3:2c:e8:64:96:94:1b:1d:
35:c5:8a:f8:44:e7:02:f5:09:e7:c5:c0:87:23:90:4a:c9:82:
ad:3c:57:6a:6a:50:68:d7:24:44:c9:a8:2f:96:89:3a:5f:c5:
a4:d0:0f:bc:e7:b1:7f:08:19:de:b4:cb:68:39:b4:8f:7d:95:
08:58:54:b3:9c:5c:de:d2:c5:59:75:ed:8d:6b:07:ab:e2:8d:
b3:f4:6b:01:cd:c1:3a:b1:05:27:81:4e:da:de:45:6f:32:ca:
14:12:74:a2:48:60:5a:63:4f:0a:6c:68:34:40:43:e4:20:c5:
59:8f:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:38 2026 by rpki-client